Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/92cfbf9a-a62a-32a5-b901-bee09fee1072.roa
File:                     92cfbf9a-a62a-32a5-b901-bee09fee1072.roa (raw, json)
Hash identifier:          kuT8V/HFPyggfs5zbLSQCWJK5t+1aONnjOQuZlrW9es=
Subject key identifier:   38:C2:C5:3D:FA:60:DA:B4:BE:CB:E7:FA:9A:CA:8E:7E:E1:54:EB:20
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584BA93268FFCD10378B0277B300
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/92cfbf9a-a62a-32a5-b901-bee09fee1072.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     198983
IP address blocks:        172.86.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:68:ff:cd:10:37:8b:02:77:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=9649d92f-e701-46a1-b854-599050b9a59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:2b:0f:f7:6a:11:22:37:f3:76:8a:7e:ea:
                    5a:2b:21:2b:65:3a:d8:4f:69:7f:33:fb:fa:4e:5a:
                    e4:84:ce:29:f4:3d:12:de:d7:7f:df:bc:a6:c6:a4:
                    39:9e:39:e1:b7:d4:14:f9:83:14:6e:fd:3b:25:df:
                    09:2a:7a:c5:16:71:fb:5d:60:5c:29:b1:4f:43:72:
                    2c:ee:2c:6c:fb:40:76:9b:e0:8e:f5:ce:70:0c:24:
                    dd:7f:6d:9c:50:50:af:11:30:4d:84:e2:79:7e:22:
                    1e:2e:2a:82:37:3d:44:32:e6:4b:4a:23:e1:7e:39:
                    96:df:20:f8:d3:f6:fb:76:3f:97:35:ad:6f:74:3b:
                    1c:7f:4a:93:19:96:bf:d9:f3:d2:3c:1c:5e:48:b1:
                    5c:09:0c:b4:31:51:63:13:9e:4d:dd:f6:b7:3b:61:
                    d2:73:fc:2b:de:86:d4:16:6c:39:e2:e3:88:c9:62:
                    3c:fc:56:82:bb:19:1c:92:87:4d:e2:9f:0e:69:48:
                    6a:36:40:f3:97:a7:56:64:63:02:e8:5e:63:94:9a:
                    e0:f1:06:78:a0:a2:3d:19:56:eb:10:e5:97:68:e7:
                    2f:e4:e1:ec:8a:4a:aa:f6:c9:06:70:77:43:58:fc:
                    7a:df:f2:ad:e0:21:ca:1c:f4:29:c9:2d:52:c1:93:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:C5:3D:FA:60:DA:B4:BE:CB:E7:FA:9A:CA:8E:7E:E1:54:EB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/92cfbf9a-a62a-32a5-b901-bee09fee1072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:f0:44:cf:96:f8:9e:e1:df:88:6a:f9:63:51:1e:96:9c:
         35:86:bb:50:02:6b:1e:96:81:11:8f:d3:0e:d4:44:39:28:89:
         0a:3f:cd:e8:e4:94:74:62:c3:31:c5:cd:e2:81:cb:77:d7:3b:
         e1:55:84:f5:26:14:bd:86:94:2e:a0:7f:4d:ad:8b:df:27:9b:
         75:32:51:e8:6c:69:af:b8:5f:9e:fe:0e:f5:06:90:cd:5f:e2:
         29:89:7f:f1:6f:ee:11:22:c7:91:3f:10:64:30:a8:8f:ef:e9:
         08:7c:3a:d8:44:c4:ea:fc:87:d0:8a:5f:05:44:e9:e2:e0:a1:
         58:41:28:67:7d:6a:b1:bd:b1:20:11:55:18:f5:7c:fe:c2:2b:
         39:70:a4:a2:19:61:7f:e7:78:10:fc:e2:79:8d:e0:86:eb:00:
         35:54:72:c9:dc:19:86:e7:6a:43:96:87:a1:b9:95:63:b4:4a:
         4c:0f:d2:1a:87:eb:db:d8:6d:81:42:13:2d:4f:8d:de:01:79:
         66:b8:dd:6d:d2:78:af:33:06:78:d3:d0:6b:43:c4:c8:d7:54:
         b2:41:f3:82:fb:04:1a:84:09:44:0c:90:7c:50:89:84:a0:b5:
         cf:e9:1b:bd:db:f2:5e:3c:a7:79:93:3e:17:47:d7:e2:dc:07:
         69:6a:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:02:46 2025 by rpki-client